VMPS: VLAN Membership Policy Server
Share this page:VLAN Membership Policy Server - provides a centralized server for selecting the VLAN for a port dynamically based on the MAC address of the device connected to the port.
VMPS uses a UDP port to listen to VQP (VLAN Query Protocol) requests from clients, so, it is not necessary for VMPS clients to know if the VMPS resides on a local or remote device on the network.
Upon receiving a valid request from a VMPS client, a VMPS server searches its database for an entry of a MAC-address to VLAN mapping.
When a port is configured as “dynamic,” it receives VLAN information based on the MAC-address that is on the port.
The VLAN is not statically assigned to the port; it is dynamically acquired from the VMPS based on the MAC-address on the port.
SECURE MODE: If MAC has not been found in VMPS Server - shut down the port
On VMPS Server:
(config)# vmps server [ipaddress | hostname] primary
On all the switches in the LAN (VMPS Clients):
(config-if)# switchport access vlan dynamic
Define how many times you want Client to contact the Server, like if you want to retry 5 times:
**(config)# vmps retry 5 **
(config)# vmps reconfirm 30 <— RETRY IN 30 MINUTES IF 5 ATTEMPTS FAIL